app[.]eoibuy-vs[.]cc

Analysis of the domain app.eoibuy-vs.cc confirms its classification as a high-risk phishing site specializing in social engineering. Registered on February 3, 2025, through Gname.com Pte. Ltd., the domain currently resolves to IP 154.218.191.117, hosted under AS137951 (ASLINE LIMITED) in Hong Kong. No SSL certificate is present, increasing the risk of credential interception. Nameservers a.share-dns.com and b.share-dns.net are consistent with patterns observed in other phishing campaigns, though no specific phishing kit or targeted brand is identified in available intelligence.

Google Safe Browsing explicitly flags this domain for social engineering, while Scamadviser assigns a trust score of 1/100, indicating near-certain malicious intent. Fifteen of 95 security vendors on VirusTotal detect the domain as malicious, though the absence of a page title or HTTP response data limits deeper content analysis. The domain appears on at least one security blocklist (PhishDestroy) and is currently offline, suggesting takedown action or voluntary suspension by the operator. Infrastructure analysis reveals no legitimate use case for this domain.

The combination of a recent registration, low-cost hosting in a high-risk jurisdiction, and the absence of encryption aligns with known phishing infrastructure. Defenders should treat this domain as confirmed malicious and block it at the DNS and network layers. Historical logs should be reviewed for connections to 154.218.191.117 or the associated nameservers, as these may indicate prior compromise. No evidence suggests this domain is part of a larger campaign, but the use of shared DNS providers warrants monitoring for related domains.